...

1 files changed, 3 insertions, 0 deletions

diff --git a/hosts/surtr/tls/default.nix b/hosts/surtr/tls/default.nix
index f8225802..01c9050e 100644
--- a/hosts/surtr/tls/default.nix
+++ b/hosts/surtr/tls/default.nix
@@ -124,6 +124,9 @@ in {
                 RFC2136_TSIG_ALGORITHM=hmac-sha256.
                 RFC2136_TSIG_KEY=${domain}_acme_key
                 RFC2136_TSIG_SECRET_FILE=${tsigSecret.path}
+                RFC2136_TTL=0
+                RFC2136_PROPAGATION_TIMEOUT=60
+                RFC2136_POLLING_INTERVAL=2
               '';
             };
           in (if isTsig then mkRFC2136 else mkKnotc) // cfg.domains.${domain}.certCfg;